Reference - 1* Tentative Security Evaluation of AFSAM DA9& Bruea 267 

2. The Security of the Pneumatic Authenticator (DEM A 96) Bruea 6l6 
3» Pneumatic Authenticator Bruea 167 

The description of the Pneumatic Authenticator as plarmed can be found in the 



references given above. 
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The authenticator as set up now has two features which place certain limitations 

on the possible variability of the device. One is the use of a constant input point 

and the other is the use of 5 groupings of 3 In the reverser. For example suppose 

each of the 5 groupings of 3 In the reverser is traced to the input end-plate* Only 

one of the trigraphs obtained would contain the constant input point* This means 

that for each alignment only one out of 5 of the tri graphic groupings in the 

reverser is used* With a variable input point any one of the 5 groupings could 

be used. This means that oily 1/5 of the potentiality of the device is being used* 

In the above references it has been shown that with planned interrogations 

certain types of solutions can be found* The possible solutions mentioned made 

use of a constant input point and the groupings of 3 in the reverser* It was 

assumed that the enemy would be able to obtain replies for challenges in Which 

all the paired rotors stand except one designated pair* In one solution it was 

shown how it might be possible to recover the settings of the paired rotors 

R 1 “ settings of Rg and R^q could be recovered Just as easily using 

the sane type of planned interrogation* The output values from R would be a 

5 



■ ' 6 9 

UJU\JIVJL> X 

sscRgr 1 

monoalphabetic substitution of the input values into E^q» That is the output 
from R^ has the same pattern as the input into R^q. The constant input point 
and the groupings of 3 in the reverser can be used effectively to recover such 
a pattern. In some instances it "snowballs" rather easily and in others it Is 
quite a laborous task. 

Suppose we have given the following replies obtained from consecutive 
settings of - R^ (the settings of the other rotors remain constant) . 

KCSFKOCFBJGHOIC 
GONQGNDLGGKI P PD 

One could assume the input positions into R^ of the 3 most frequent letters, 

one of which would be the constant input point A and the other two could be G and 

F. The initial setting of R would be assumed. The input values for the 3 letters 
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would be enciphered through R,. at the proper relative settings of R^. A partial 
pattern of the output values from is thus obtained. The initial setting of R^q 
is assumed and trigraphs from the reverser are deciphered at the proper relative 
settings of R^ so as to obtain a partial pattern which agrees with the partial 
output pattern from My Each partial pattern suggest s' values for the other so 
that when all correct assumptions are made the patterns build up very quickly. 
Contradictions show up in most instances with incorrect assumptions. In some 
instances if there are not enough repeats in the first partial output pattern 
from R,. so as to eliminate some of the possible assumptions from the trigraphs 
in the reverser, it requires several trials to recover the patterns by hand. With 
repeats, contradictions show up quickly and eliminate some of the possible trials. 
(The setting identified for R. could only be a relative setting). 
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There are 15 x 14 x 13 » 2730 possible combinations for the three input 
positions of A, 0 and F into R^» Altogether there are ^5JL2|J£ 13 * 455 
different trigraphs. The U55 trigraphs can be listed according to their cyclic 
interval patterns. There would be 15 trigraphs for each pattern. To illustrate - 



Interval pattern 1-1-13 



A B 
B C 
C D 
DBF 
etc. 



C 

0 

E 



1 - 2-12 
A B D 
BCE 
CDF 
DEO 
etc. 



1 - 6-8 
A B H 

B C 
C D 
D E K 

etc. 



I 

J 



There are altogether 31 different Interval patterns. 

Instead of considering 2730 possible assumptions for the three input 
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positions into R^ for A, G and F, assume the use of one of the 31 interval patterns < 
Suppose the interval pattern 2 - 2 - 11 is assumed. The three input positions 



would then be A - C - Do There would be 3 nays of selecting the input position 
of the constant input A and 2 for 0 and F. There would be 6 orders to be considered. 

Altogether there would be 6 x 31 *= 186 assumptions for the three input positions 
Instead of 2/30. 



Suppose there were 31 people who were assigned to recover the sett ing 



(or relative setting) of and the actual setting of R^. Each individual 



would have to assume the order of the input positions and the settings of R and 
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Rjjq. There would be a total of 6 x 15 x 1? ■* 1350 possible assumptions for each 
person-. In most instances if thsre are two letters of which each appears 5 or 
more times in the replies the patterns build up more easily and the number of 
assumptions in most instances are reduced considerably. This solution by no 

compromises the device but might lead to other solutions which could compromise the 
device. 
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Wiring of the reverser - 

If two of the trigraphs in the reverse r have the same patterned interval 
and the rotors are moved as a block against the reverser it would be possible 
to produce a 3 - way lobster effect. For example suppose the two groupings 
C J N and D H 0 are used in the reverser. The cyclic interval patterns are 
7 - 4 - 4 and 4 - 7 - 4 respectively i.e. they have the sane cyclic pattern. 

This means that an encipherment of the constant input point which cones into 
the reverser back through the maae by way of C J N at setting S^, Sg, S^, S,.. 
A second encipherment of the oonstant input point at setting (S^ 5 ) > (S 2 + 5 )»(S^+ 5 )» 
(S^ + 5)j(^»+ 5) would go through the maze and the reverser by way of 0 HO. The 
lobster effect could be recognized in the trigraphs obtained from the two letter 
replies and the oonstant input point. If the two replies K M and C F are 
obtained from the two challenges the lobster effect is detected by the fact 
that C F A is five positions from HAKas-(MNOABC) j(A BCDEP); 

( K L M N 0 A) 

The lobster effect cannot be eliminated completely by careful wiring of the 
reverser. It is true there are 5 patterned intervals which have no repeats as 
1-1-13, 2 - 2 - JJL, 3 - 3 - 9 - 4 - 4-7 and 5-5 - 5« But it is impossible 
to wire a reverser using all five patterned intervals in the same reverser. 
Consequently all rever 3 ers have to include repeats in at ledst one of the 
intervals for some of the reverser trigraphs « This means that two-way lobster 
effects could be produced at the proper offset for the trigraphs which have the 
repeats. If the offset for two challenges (plus the constant input point) agrees 
with the offset for two trigraphs which have repeat intervals then it would be 
possible to associate the replies with the reverser trigraphs that were used in 
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eaeh encipherment, an example of 5 reveraer trigraphs and the patterned intervale 
are 



1 - A E J -4-5-6 
2 -BDK - 2 - 7-6 

3 - C L N - 9 - 2 - 4 

4 - F I 0 - 3- 6- 6 
5-GHM -1-5-9 



A two way lobster would show up if trigraphs 1 and 2 are used at an offset of one 
(A is offset one from B, and J one from K) . 

Stationary rotors interspersed among the stepping rotors could eliminate the 
possible occurrence of a lobster during a day's traffic. If the stationary rotors 
placed only next to the reverser it is possible to increase the occurrences of the 
lobster effect. This is because the combined effect of the reveraer and stationary 
rotors could produce two or more groupings of three with the same cyclic interval 
pattern. 

TO avoid the carry over of the lobster effect from one day' s traffic to the 
next, the relative alignment of the rotors within at least one paired set must be 
offset from any of the previous day's relative alignments. 

How could the use of planned interrogation be eliminated? Or what changes 
could be made in the use of the device in order to eliminate the possible use of 
planned interrogation? What could be substituted for the use of the constant input 
point and the groupings of 3 in the reveraer. 

Adding rotors will not eliminate the possibility of soma of the solutions. 



Some of the weaknesses of the device might be offset *sr 




1. Double encipherment 

2. Varying the position of the input point. 

3 . Scrambled end-plate j but produce each letter of the reply one at time 
and read as produced. 

U. Eliminate the use of trigraphic reveraera. 



Any Norman 
NSA-314 
June 1954 
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